Multiple NVIDIA GPU Graphics Card Driver Gain of Privilege Vulnerability

NVIDIA GPU graphics driver R346 and R352 for Linux and R352 for GRID vGPU and vSGA are graphics processor GPU drivers from NVIDIA. A security vulnerability exists in the host memory mapping path feature of several NVIDIA GPU graphics drivers, which stems from the program's failure to properly...

CVE-2015-8328

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or possibly gain privileges via unknown vectors...

DEBIAN-CVE-2015-7869

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive...

CVE-2015-7866

Unquoted Windows search path vulnerability in the Smart Maximize Helper nvSmartMaxApp.exe in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as...

CVE-2015-8328

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or possibly gain privileges via unknown vectors...

CVE-2015-8328

CVE-2015-8328 is an unspecified vulnerability in the NVAPI support layer of NVIDIA GPU drivers on Windows (R340 < 341.92, R352 < 354.35, R358

CVE-2015-5053

CVE-2015-5053 affects NVIDIA GPU graphics drivers (Linux) R346 before 346.87 and R352 before 352.41, and GRID vGPU/vSGA with R352 before 352.46. The host memory mapping path feature fails to properly restrict access to third‑party device IO memory, enabling a local attacker to gain privileges and...

CVE-2015-8328

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or possibly gain privileges via unknown vectors...

CVE-2015-7869

CVE-2015-7869 refers to multiple integer overflows in the NVIDIA GPU graphics driver kernel mode components. Affected are Windows drivers R340 (<341.92), R352 (<354.35), R358 (<358.87) and Linux drivers R304 (<304.131), R340 (<340.96), R352 (<352.63), R358 (

CVE-2015-5053

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of...

CVE-2015-7866

CVE-2015-7866 describes an unquoted Windows search path vulnerability in the NVIDIA GPU graphics driver control panel component nvSmartMaxApp.exe. A local attacker could exploit this to escalate privileges, demonstrated by using a Trojan horse named C:\Program.exe. The affected products are NVIDI...

CVE-2015-8328

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or possibly gain privileges via unknown vectors...

AMD fglrx-driver elevation of privilege vulnerability

AMD fglrx-driver is a set of fglrx drivers from AMD USA. AMD fglrx-driver fails to properly handle symbolic links, allowing local attackers to exploit the vulnerability to corrupt system files and conduct denial-of-service attacks...

CVE-2013-5987

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors...

CVE-2013-5986

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 has unknown impact and attack vectors, a different vulnerability than CVE-2013-5987...

Multiple Vulnerabilities in Apple OS X Graphics Drivers (CNVD-2015-07138)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability exists in the NVIDIA driver for the Graphics Drivers subsystem in versions of Apple OS X prior to 10.11.1. A local attacker exploiting this vulnerability. It c...

Apple iOS Arbitrary Code Execution Vulnerability (CNVD-2015-07162)

OS is an operating system developed by Apple Inc. for mobile devices. safari is the browser in Mac OS X, the latest operating system for Apple computers. iTunes is a digital media playback application. A security vulnerability exists in com.apple.driver.AppleVXD393 in the Graphics Driver subsyste...

Samsung fimg2d - FIMG2D_BITBLT_BLIT ioctl Concurrency Flaw

Source: https://code.google.com/p/google-security-research/issues/detail?id=492 The Samsung Graphics 2D driver /dev/fimg2d is accessible by unprivileged users/applications. It was found that the ioctl implementation for this driver contains a locking error which can lead to memory errors such as...

Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

CVE-2015-6986

com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."...